HP LaserJet M1120, LaserJet M1120n White Paper

White Paper

Contents

1 Introduction................................ 2

2 Methodologies........................... 2

3 Topology.................................... 3

4 Authentication Sequence .......... 4

HP MFP Smartcard

Authenication Solution

Abstract:

The HP Common Access Card Solution provides authentication for
Department of Defense (DOD) Common Access Cards (CAC)
employing a Smart Card reader at the HP MFP device. The
solution is Homeland Security Presidential Directive 12 (HSPD-12)
compliant, using Public Key Infrastructure (PKI) encryption and
Kerberos authentication to provide authenticated E-mail and Scan
to Folder sessions.

.

Notice:

©2005 Hewlett-Packard Company

Microsoft®, Windows®, and Windows NT® are trademarks of Microsoft
Corporation in the U.S. and/or other countries. UNIX® is a trademark of The
Open Group in the U.S. and/or other countries. Intel® and Itanium® are
trademarks or registered trademarks of Intel Corporation or its subsidiaries in the
U.S. and other countries. Oracle® is a registered U.S. trademark of Oracle
Corporation, Redwood City, California. All other product names mentioned
herein may be the trademarks of their respective companies.

Neither HP, nor any of its subsidiaries, shall be liable for technical or editorial
errors or omissions contained herein. The information in this publication is
provided "as is" without warranty of any kind and is subject to change without
notice. The warranties for HP products are set forth in the express limited warranty
statements accompanying such products. Nothing herein should be construed as
constituting an additional warranty.

HP Common Access Card Solution March 2007

1 Introduction

The Common Access Card (CAC) is a United States Department of Defense (DoD) smartcard
issued as standard identification for military personnel and contractor personnel. The CAC is used
as a general identification card as well as for authentication to enable access to DoD computers
and networks. The HP Common Access Card Solution extends the CAC to the HP MFP devices.
Users are able to authenticate at the MFP by inserting their CAC into an attached card reader
and entering their PIN. After their card is accepted, the user can send E-mail or Scan documents
to folders. The user ends their session by removing their CAC card from the device’s card reader.

Figure 1 – Example DoD Common Access Card

2 Methodology

The CAC session begins when the user inserts their CAC card into the HP MFP card reader.

§ The card is validated against the PIN entered by the user.

§ The certificate stored on the card is checked for a valid expiration date, then against the

Certificate Authority server that it has not been revoked.

§ The CAC certificate is used for Private Key-Public key authentication to establish and decrypt

a Kerberos session key.

§ The session key is used to obtain a client/server ticket to access Active Directory using LDAP

to obtain the user’s e-mail attributes and folder permissions.

The session ends when the user removes the CAC from the card reader.

Page 2